CVE-2023-46141
Phoenix Contact: Automation Worx and classic line controllers prone to Incorrect Permission Assignment for Critical Resource
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
Incorrect Permission Assignment for Critical Resource vulnerability in multiple products of the PHOENIX CONTACT classic line allow an remote unauthenticated attacker to gain full access of the affected device.
Timeline
- CVE published
- Record last updated
Affected versions
- PHOENIX CONTACT Automation Worx Software Suite
All versions
- PHOENIX CONTACT AXC 1050
All versions
- PHOENIX CONTACT AXC 1050 XC
All versions
- PHOENIX CONTACT AXC 3050
All versions
- PHOENIX CONTACT Config+
All versions
- PHOENIX CONTACT FC 350 PCI ETH
All versions
- PHOENIX CONTACT ILC1x0
All versions
- PHOENIX CONTACT ILC1x1
All versions
- PHOENIX CONTACT ILC 3xx
All versions
- PHOENIX CONTACT PC Worx
All versions
- PHOENIX CONTACT PC Worx Express
All versions
- PHOENIX CONTACT PC WORX RT BASIC
All versions
- PHOENIX CONTACT PC WORX SRT
All versions
- PHOENIX CONTACT RFC 430 ETH-IB
All versions
- PHOENIX CONTACT RFC 450 ETH-IB
All versions
- PHOENIX CONTACT RFC 460R PN 3TX
All versions
- PHOENIX CONTACT RFC 470S PN 3TX
All versions
- PHOENIX CONTACT RFC 480S PN 4TX
All versions